The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill ingests large volumes of untrusted data from external platforms (LinkedIn, TikTok, Reddit) to generate content ideas. This provides a surface for indirect prompt injection attacks where malicious instructions hidden in social media posts or comments could influence the agent's behavior.
Ingestion points: Data retrieved via Apify scrapers from LinkedIn posts/comments, TikTok trends, and Reddit threads.
Boundary markers: The skill does not define specific delimiters or warnings to treat external content as untrusted data during summarization.
Capability inventory: Notion write access (notion-schema.md), external network access to Apify and Fathom APIs.
Sanitization: No explicit sanitization or filtering of external text is documented before processing.
[DATA_EXFILTRATION]: The skill is designed to access and analyze highly sensitive information, including meeting transcripts from Fathom, financial models, and internal work-streams. While intended for research, the ability to read private client data and subsequently perform network operations to external services (Apify) creates a potential path for data exposure if queries are not strictly constrained.
[EXTERNAL_DOWNLOADS]: The skill utilizes external scraping logic through third-party Apify actors (apimaestro/linkedin-profile-posts, harvestapi/linkedin-post-search). While Apify is a recognized service, the logic execution is delegated to these remote actors.

03-research